Data processing
Agreement.
How we process, store, and protect your data under GDPR and applicable privacy regulations.
Reading aid
Find the question behind the clause.
Move a reading marker through a sample document outline. Use the actual agreement below to understand the applicable terms.
Key terms
Clear commitments.
Processing scope
We process data only to operate the platform: running workloads, storing state, routing requests, and generating audit logs. No secondary use.
Data residency
Choose your region. Data stays where you put it. EU, US, or APAC. Cross-region replication only when you explicitly configure it.
Sub-processors
Transparent list of sub-processors. 30-day advance notice for changes. Right to object. No surprise data sharing.
Breach notification
72-hour notification SLA for confirmed breaches. Full incident report within 5 business days. Remediation timeline included.
Need a custom DPA?
Enterprise customers can request custom data processing terms.